MSRC-CVE-2022-24465 — Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability

Summary

Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker could potentially bypass the Intune policy file save location.

Security updates
5.2112.3 — https://apps.apple.com/us/app/intune-company-portal/id719171358

Vulnerabilities 1

Low 3.3

CVE-2022-24465

Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability

Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability

Microsoft Intune Company Portal for iOS iOS

Mar 9, 2022

Revision history

2022-03-08 #1
Information published.

References

CVE-2022-24465 Microsoft Intune Portal for iOS Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24465
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss